As Stylemizo E-Ticaret Hizmetleri Sanayi Ve Ticaret A.Ş., we attach great importance to the processing of your personal data in accordance with the relevant legislation. In this context, we would like to inform you about our personal data processing process and your rights under the Personal Data Protection Law No. 6698 (“LPPD”).

1. General Definition

Within the scope of the law, personal data covers all kinds of data related to an identified or identifiable natural person. Special Personal Data, which is a special type of personal data, refers to race, ethnic origin, political opinion, philosophical belief, religion, sect, other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, biometric and genetic data.

Processing of personal data refers to any operation performed on data, such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, either fully or partially by automatic means or, provided that it is part of any data recording system, by non-automatic means.

2. Purpose and Identity of Data Controller

This “General Information Text on the Protection and Processing of Personal Data” has been prepared by the data controller Stylemizo E-Ticaret Hizmetleri Sanayi Ve Ticaret A.Ş., whose identity is given below, in accordance with Article 10 of the “Law on the Protection of Personal Data No. 6698” (“Law”) and the “Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Information Obligation”, in order to fulfill the information obligation regarding the processing of your personal data.

Your personal data may be processed by Stylemizo E-Ticaret Hizmetleri Sanayi Ve Ticaret A.Ş., residing at the address “Esentepe Mah. Büyükdere Cad. Loft Resıdance No: 201 İç Kapı No: 9 Şişli/ İstanbul”, in accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), in the capacity of the data controller, within the framework of the purposes listed below and in a limited and proportionate manner in connection with these purposes, by preserving the accuracy and up-to-dateness of the personal data as received by us, within the scope explained below.

3. Purposes of Processing Your Personal Data

Your collected personal data will be processed by Stylemizo E-Ticaret Hizmetleri Sanayi Ve Ticaret A.Ş. in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law, for the purposes listed below. Accordingly, your personal data will be processed for the legal reasons that; It is directly related to the establishment and/or execution of a contract between Stylemizo and you, It is clearly foreseen in the laws, It is mandatory for the fulfillment of a legal obligation, It has been made public by the relevant person, Data processing is mandatory for the establishment, exercise or protection of a right, Processing of personal data is necessary provided that it does not harm the fundamental rights and freedoms of the relevant person.

• To confirm the identity of the person who makes/makes purchases via the website/mobile applications,

• To analyze and understand aggregated statistical data such as the frequency and times of site and/or mobile application or store visits, order placement times, statistics on product pages visited and products ordered, and visitor movements, orders and preferences,

• To process orders through online services, to carry out and complete order processes and to communicate with our customers (e.g. name-surname, address, date of birth)

• To send text message notifications to inform you of the delivery status and to report any possible problems with the delivery of purchased products (e.g. mobile phone number)

• To send marketing content such as newsletters, campaigns, events, collection promotions, surveys and catalogues (e.g. e-mail address, name-surname and postal address)

• To answer questions and inform about new or changed services, to provide information about products, services, campaigns and promotions (e.g. e-mail address, mobile phone number)

• To communicate with our customers regarding the conditions, current status and updates of the contracts we have concluded under the relevant articles of the Distance Selling Contract and the Consumer Protection Law, and to provide the necessary information,

• For online shopping and to verify legal age (e.g. date of birth)

• To strengthen the security of the Site and/or Mobile Application.

• To fulfill our legal obligations and exercise our rights arising from the current legislation,

4. Parties to Which Your Personal Data is Transferred and the Purposes of Transfer

Your collected personal data may be shared with our business partners, suppliers, group companies, shareholders, legally authorized public institutions and private individuals, companies we work with domestically and abroad (cargo, call center, database, SMS and mail provider, personalization, etc. service companies) within the scope of our legal services, in accordance with the provisions of all relevant legislation and the basic principles stipulated in Law No. 6698, within the scope of the personal data transfer conditions specified in Articles 8 and 9 of the Law, within the scope of the “Purposes” listed above by Stylemizo E-Ticaret Hizmetleri Sanayi Ve Ticaret A.Ş., for the purposes of implementing the contract established between Stylemizo and you and ensuring the fulfillment of our obligations within the scope of the contractual relationship, providing better service to our customers and meeting the commitments of Stylemizo E-Ticaret Hizmetleri Sanayi Ve Ticaret A.Ş. to its customers.

5. Method and Legal Reason for Collecting Your Personal Data

Your personal data may be collected by Stylemizo E-Commerce Services Industry and Trade Inc. via e-mail, website, written documents, fax, invoice, job application forms, documents submitted by data owners and other communication channels in auditory, electronic, written and verbal forms. In addition, your personal data will be collected based on the legal reasons of establishing and/or performing a contract, establishing, exercising and/or protecting a right, fulfilling a legal obligation and legitimate interest specified in Articles 5 and 6 of the Law and, if provided, your explicit consent.

When the purpose requiring the processing of your personal data pursuant to Article 7/1 of the Personal Data Protection Law is eliminated and/or the limitation/storage periods required for us to process your data pursuant to the legislation expire, your personal data will be deleted, destroyed or anonymized.

6. Processing Period of Your Personal Data

As Stylemizo E-Commerce Services Industry and Trade Inc., we keep the processed personal data accurate and up-to-date in the relevant departments within the scope of current technological methods. For this purpose, personal data is kept for the necessary periods in line with the purposes of processing, in accordance with the principles in the relevant legislation. Stylemizo E-Commerce Services Industry and Trade Inc. will delete, destroy or anonymize personal data ex officio or upon the request of the Data Owner, if the reasons requiring processing are eliminated.

7. Cases in which Personal Data Can Be Processed Without Explicit Consent as per the Personal Data Protection Law

In accordance with Article 5 of the Personal Data Protection Law No. 6698, your personal data may be processed without your explicit consent in the following cases. Namely;

• In cases clearly stated in the laws,

• If you are unable to give your consent as the data owner due to a de facto impossibility or if your consent is not legally valid, the processing of your personal data is necessary to protect your life or the physical integrity of someone else,

• It is necessary to process your personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of a contract,

• It is mandatory to fulfill a legal obligation,

• Your personal data has been made public by you,

• Data processing is mandatory for the establishment, exercise or protection of a right,

• Data processing is necessary for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms.

• Personal health data may be processed by persons or authorized institutions and organizations under a confidentiality obligation, without the explicit consent of the person concerned, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing.

8. Your Rights as a Personal Data Owner, Listed in Article 11 of the Law

In accordance with Article 11 of the Law, we hereby inform you that as data owners, you have the following rights:

• To learn whether your personal data is being processed,

• Request information regarding your personal data if it has been processed,

• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

• To know the third parties to whom your personal data is transferred, either domestically or abroad,

• To request correction of your personal data if it is processed incompletely or incorrectly and to request that the action taken in this context be notified to third parties to whom your personal data has been transferred,

• Requesting the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the Law and other relevant legal provisions, and requesting that the action taken within this scope be notified to third parties to whom your personal data has been transferred,

• To object if a result against you arises as a result of the analysis of processed data exclusively through automatic systems,

• To request compensation in case you suffer damage due to the unlawful processing of your personal data.

As the relevant person, you must submit your claims in writing to the data controller by providing the necessary documents that prove your identity. In this context, in order for your applications to be managed in a healthy and rapid manner within the scope of Article 11 of the Personal Data Protection Law, you can use the “Relevant Person Information Request Form” document available at www.newarrivals.co or you can personally deliver your petition containing the minimum requirements in the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing and with wet signature, to our company’s address “Esentepe Mah. Büyükdere Cad. Loft Resıdance No: 201 İç Kapı No: 9 Şişli/ İstanbul”, send it through a notary public or, if your e-mail address is registered in our company’s systems, you can send it via the e-mail address hello@newarrivals.co .

Depending on the nature of your request, your applications will be finalized as soon as possible and within 30 (thirty) days at the latest and you will be informed.